Dsr cp/cps version 11 Effective Date: November 18, 2022

6. Technical Security Controls ..............................................................................37
 
6.1 Key Pair Generation and Installation ...................................................................................... 37
 
6.2 Private Key Protection and Cryptographic Module Engineering Controls ............................ 39
 
6.3 Other Aspects of Key Pair Management ................................................................................ 41
 
6.4 Activation Data ....................................................................................................................... 41
 
6.5 Computer Security Controls ................................................................................................... 41
 

---

6.6 Life-Cycle Technical Controls ................................................................................................ 42
 
6.7 Network Security Controls ..................................................................................................... 42
 
6.8 Time-Stamping ....................................................................................................................... 42
 
7. Certificate, CRL, and OCSP Profiles ...............................................................42
 
7.1 Certificate Profile .................................................................................................................... 42
 
7.2 CRL Profile ............................................................................................................................. 50
 
7.3 OCSP Profile ........................................................................................................................... 51
 
8. Compliance Audit and Other Assessments .....................................................51
 
8.1 Frequency and Circumstances of Assessment ........................................................................ 51
 
8.2 Identity/Qualifications of Assessor ......................................................................................... 52
 
8.3 Assessor's Relationship to Assessed Entity ............................................................................ 52
 
8.4 Topics Covered by Assessment .............................................................................................. 52
 
8.5 Actions Taken as a Result of Deficiency ................................................................................ 52
 
8.6 Communications of Results .................................................................................................... 52